chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@scalprum/core	0.9.3 → 0.10.1			resolutions	minor
@scalprum/react-core	0.11.2 → 0.13.1			resolutions	minor
@scalprum/react-test-utils	0.3.0 → 0.3.2			devDependencies	patch
actions/cache	v6.0.0 → v6.1.0			action	minor
actions/checkout	v6.0.3 → v6.1.0			action	minor
actions/setup-node	v6.4.0 → v6.5.0			action	minor
github/codeql-action	v3.36.2 → v3.37.3			action	minor
oxfmt (source)	0.56.0 → 0.60.0			devDependencies	minor
oxlint-tsgolint	0.23.0 → 0.25.0			devDependencies	minor
prettier-plugin-sh (source)	0.18.1 → 0.19.0			devDependencies	minor
tombi-toml/setup-tombi	v1.1.5 → v1.2.4			action	minor

---

Release Notes

scalprum/scaffolding (@​scalprum/core)

v0.10.1

Compare Source

v0.10.0

Compare Source

actions/cache (actions/cache)

v6.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v6.1.0 - handle read-only cache access by @​jasongin in #​1768

Full Changelog: actions/cache@v6...v6.1.0

actions/checkout (actions/checkout)

v6.1.0

Compare Source

actions/setup-node (actions/setup-node)

v6.5.0

Compare Source

What's Changed

• Update @​actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @​HarithaVattikuti in #​1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

github/codeql-action (github/codeql-action)

v3.37.3

Compare Source

No user facing changes.

v3.37.2

Compare Source

• The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #​4023
• The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #​4007

v3.37.1

Compare Source

• Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
• Update default CodeQL bundle version to 2.26.1. #​4019

v3.37.0

Compare Source

v3.36.3

Compare Source

No user facing changes.

oxc-project/oxc (oxfmt)

v0.60.0

Compare Source

v0.59.0

Compare Source

🐛 Bug Fixes

• 415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#​24286) (leaysgur)

v0.58.0

Compare Source

v0.57.0

Compare Source

un-ts/prettier (prettier-plugin-sh)

v0.19.0

Compare Source

Minor Changes

• #​512 733fcfd Thanks @​jjloneman! - feat: ✨ support zsh dialect by upgrading sh-syntax to ^0.6.0

tombi-toml/setup-tombi (tombi-toml/setup-tombi)

v1.2.4

Compare Source

This setup-tombi release matches tombi v1.2.4.

Full Changelog: tombi-toml/setup-tombi@v1...v1.2.4

v1.2.3

Compare Source

This setup-tombi release matches tombi v1.2.3.

Full Changelog: tombi-toml/setup-tombi@v1...v1.2.3

v1.2.2

Compare Source

This setup-tombi release matches tombi v1.2.2.

Full Changelog: tombi-toml/setup-tombi@v1...v1.2.2

v1.2.1

Compare Source

This setup-tombi release matches tombi v1.2.1.

Full Changelog: tombi-toml/setup-tombi@v1...v1.2.1

v1.2.0

Compare Source

This setup-tombi release matches tombi v1.2.0.

Full Changelog: tombi-toml/setup-tombi@v1...v1.2.0

v1.2

Compare Source

v1.1.7

Compare Source

This setup-tombi release matches tombi v1.1.7.

Full Changelog: tombi-toml/setup-tombi@v1...v1.1.7

v1.1.6

Compare Source

This setup-tombi release matches tombi v1.1.6.

What's Changed

• Update README checksum examples by @​ya7010 in #​44
• Fix README checksum regeneration by @​ya7010 in #​45

Full Changelog: tombi-toml/setup-tombi@v1...v1.1.6

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[openshift-ci]

Hi @renovate[bot]. Thanks for your PR.

I'm waiting for a redhat-developer member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 59.96%. Comparing base (6cdd57d) to head (c5b80df).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4994      +/-   ##
==========================================
- Coverage   63.69%   59.96%   -3.74%     
==========================================
  Files         123      111      -12     
  Lines        2424     2198     -226     
  Branches      571      546      -25     
==========================================
- Hits         1544     1318     -226     
- Misses        878      879       +1     
+ Partials        2        1       -1     

Flag	Coverage Δ
rhdh	59.96% <ø> (-3.74%)	⬇️

Components	Coverage Δ
Backend plugins	∅ <ø> (∅)
Backend app	66.66% <ø> (ø)
Frontend app	58.89% <ø> (ø)
Plugin utils	∅ <ø> (∅)
Dynamic plugins utils	∅ <ø> (∅)

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6cdd57d...c5b80df. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[kim-tsao]

/ok-to-test

[kim-tsao]

/lgtm

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-4994
• quay.io/rhdh-community/rhdh:pr-4994-3cfee53d

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-4994
• quay.io/rhdh-community/rhdh:pr-4994-bbcbdd03

[albarbaro]

/lgtm

[openshift-ci]

New changes are detected. LGTM label has been removed.

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-4994
• quay.io/rhdh-community/rhdh:pr-4994-5bb45611

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: cancelled.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

The container image build workflow finished with status: failure.

[openshift-ci]

@renovate[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-ocp-helm	c5b80df	link	true	/test e2e-ocp-helm

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.